This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa File: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (raw, json) Hash identifier: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg= Subject key identifier: 8B:AC:8C:DC:1B:F7:E7:77:2C:0F:55:32:70:A9:D2:AD:42:63:FC:2F Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 29EB117BD13ED8A587336D7DDA69E156DE08777D Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa Signing time: Fri 26 Dec 2025 18:34:09 +0000 ROA not before: Fri 26 Dec 2025 18:29:09 +0000 ROA not after: Fri 25 Dec 2026 18:34:09 +0000 asID: 263400 IP address blocks: 2804:15a4::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 22:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:eb:11:7b:d1:3e:d8:a5:87:33:6d:7d:da:69:e1:56:de:08:77:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Dec 26 18:29:09 2025 GMT Not After : Dec 25 18:34:09 2026 GMT Subject: CN=8BAC8CDC1BF7E7772C0F553270A9D2AD4263FC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:d0:ce:15:c5:15:59:94:0c:5e:30:6c:08: 85:64:52:fb:3e:38:4f:9d:88:06:74:18:3c:d6:df: d7:9e:15:d4:57:03:42:64:a2:3a:6f:9a:ae:0a:fa: 11:a6:f5:63:08:56:5b:7e:82:0a:40:6a:26:80:ef: e3:e5:96:9f:ee:23:75:6e:9d:4e:06:44:ac:37:12: 0a:07:61:b5:17:bd:72:d2:27:96:aa:d7:09:16:f6: 32:30:50:13:04:7c:93:95:34:b4:1b:10:97:69:52: de:60:85:48:a4:11:85:e6:3f:e9:f4:8b:d5:88:92: 8b:39:fd:dc:2c:b0:6c:eb:e2:42:60:77:db:a1:73: e9:27:6e:38:6a:3f:a3:96:1b:2f:6c:34:c1:cc:47: e8:b7:46:7c:69:9a:c9:f2:74:2c:e1:12:06:eb:89: 2c:f3:67:c6:61:be:c7:94:9e:14:cf:8f:89:3d:06: 40:c4:ac:81:9c:ba:9b:67:ba:40:49:8f:88:8a:bb: 88:fd:1c:d3:0e:c1:13:02:ef:37:24:a9:21:b8:4e: cd:94:a1:2a:41:af:56:ba:35:a7:30:6c:02:2d:fc: e5:93:03:19:11:e9:1d:fe:38:a7:33:cd:4d:ee:2c: 8f:99:38:1a:fa:41:8e:f8:ed:b9:70:d2:e8:3d:21: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AC:8C:DC:1B:F7:E7:77:2C:0F:55:32:70:A9:D2:AD:42:63:FC:2F X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:15a4::/32 Signature Algorithm: sha256WithRSAEncryption 37:b6:9f:ed:5b:51:75:0e:17:cc:5d:a2:9c:a6:e6:3e:0b:be: 6c:86:d4:bc:cd:ab:a2:e3:3b:4a:b9:fc:4f:4d:df:72:78:f3: ff:97:25:ff:0c:ad:88:69:09:19:ef:43:a3:4d:a4:de:f3:8b: 87:b1:e5:9a:19:73:5e:bb:23:36:24:6e:1c:76:4f:6f:8d:bd: 64:d2:6c:09:2d:51:89:c8:90:e2:8e:92:27:15:40:9a:b5:07: 11:40:1e:0b:67:2c:b5:4b:0e:7c:2b:84:72:ad:32:08:c2:43: ec:37:b5:11:95:e8:ba:e0:45:66:57:4c:a1:9f:8a:fc:3d:24: 93:0b:4a:53:46:3d:8c:9b:94:d9:24:71:44:1b:60:38:d6:9e: e9:3d:d6:f4:d6:2c:e8:69:a1:e9:54:98:ab:7e:2b:de:1f:cf: 89:5e:41:ed:ce:97:d7:33:bf:9d:b7:53:0c:01:c4:b9:51:43: ba:62:4e:a7:87:85:08:0e:73:40:ad:3f:b5:87:e6:5e:9e:00: 4c:ca:18:6f:10:93:5e:d2:5c:7c:a5:91:33:6e:52:a6:d3:c7: 6e:53:ed:16:c5:95:43:f4:ef:9d:ba:e8:90:2d:54:ee:af:d2: e1:da:49:72:e6:66:e9:f9:23:bf:8d:54:c7:ce:22:2d:8d:03: 37:94:d3:43 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUKesRe9E+2KWHM2192mnhVt4Id30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTEyMjYxODI5MDlaFw0yNjEyMjUxODM0MDlaMDMxMTAvBgNV BAMTKDhCQUM4Q0RDMUJGN0U3NzcyQzBGNTUzMjcwQTlEMkFENDI2M0ZDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2dDOFcUVWZQMXjBsCIVkUvs+ OE+diAZ0GDzW39eeFdRXA0Jkojpvmq4K+hGm9WMIVlt+ggpAaiaA7+Pllp/uI3Vu nU4GRKw3EgoHYbUXvXLSJ5aq1wkW9jIwUBMEfJOVNLQbEJdpUt5ghUikEYXmP+n0 i9WIkos5/dwssGzr4kJgd9uhc+knbjhqP6OWGy9sNMHMR+i3RnxpmsnydCzhEgbr iSzzZ8ZhvseUnhTPj4k9BkDErIGcuptnukBJj4iKu4j9HNMOwRMC7zckqSG4Ts2U oSpBr1a6NacwbAIt/OWTAxkR6R3+OKczzU3uLI+ZOBr6QY747blw0ug9IRajAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUi6yM3Bv353csD1UycKnSrUJj/C8wHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJFaG52QXdRQnh5UGJraFVwaE1RbnhDdVRFRGd2N2tTQjFhVEQ0MThUaFNYLzEv MzIzODMwMzQzYTMxMzU2MTM0M2EzYTJmMzMzMjJkMzQzNDIwM2QzZTIwMzIzNjMz MzQzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQVpDANBgkqhkiG9w0BAQsFAAOCAQEAN7af7VtR dQ4XzF2inKbmPgu+bIbUvM2rouM7Srn8T03fcnjz/5cl/wytiGkJGe9Do02k3vOL h7HlmhlzXrsjNiRuHHZPb429ZNJsCS1RiciQ4o6SJxVAmrUHEUAeC2cstUsOfCuE cq0yCMJD7De1EZXouuBFZldMoZ+K/D0kkwtKU0Y9jJuU2SRxRBtgONae6T3W9NYs 6Gmh6VSYq34r3h/PiV5B7c6X1zO/nbdTDAHEuVFDumJOp4eFCA5zQK0/tYfmXp4A TMoYbxCTXtJcfKWRM25SptPHblPtFsWVQ/TvnbrokC1U7q/S4dpJcuZm6fkjv41U x84iLY0DN5TTQw== -----END CERTIFICATE-----Generated at Fri Jan 2 03:36:34 2026 by rpki-client